Memorandum of Understanding 


The Information Commissioner 
and 


Nacro's Resettlement Advice Service 


Introduction 


1, 


This Memorandum of Understanding (MoU) establishes a framework 
for co-operation and information sharing between Nacro vla the 
Resettlement Advice Service and the Information Commissioner 
(the Commissloner) In connection with the sharing or relevant 
Information and Intelligence, set out at 13 below. It sets out the role 
of each organisation and documents the practical working level 
arrangements between the Commissioner and the Resettlement 
Advice Service. 


The Commissioner and Nacro will monitor the operation of this 
memorandum and will review It, Initially after six months from the 
date of this document, and subsequently from time to time as 
necessary. 


Any changes to this memorandum identified between reviews may 
be agreed in writing between the parties. 


Any issues arising in relation to this memorandum will be notified to 
the point of contact for each organisation (referred to In 26 below). 


This memorandum is a statement of Intent that does not give rise to 
legally binding obligations on the part of either the Commissioner or 
Nacro, 


Functions and powers of Commissioner 


6. 


The Commissioner is a corporation sole appointed by Her Majesty 
the Queen under the Data Protection Acts 1984 and 1998 to act as 


the UK's independent regulator promoting public access to official 
information and protecting personal data. 


The Commissioner regulates the Data Protection Act 1998 (DPA), 
the Freedom of Information Act 2000 (FOIA), the Privacy and 
Electronic Communications (EC Directive) Regulations 2003 (PECR), 
the Environmental Information Regulations 2004 (EIR) and the 
INSPIRE Regulatlons 2009. 


10. 


Section 51 of the DPA places a duty on the Commissioner to 
promote the following of good practice by data controllers and the 
observance of the requirements of the DPA by organisatlons. 


Where the Commissioner Is satisfled that any of the data protection 
principles have been breached, a number of steps can be taken to 
seek to change the behaviour of the organisation Including: 
serving information notices requiring organisations to provide the 
Information Commissioners Office with specified Information 
within a certain time period; 
issulng undertakings committing an organisation to a particular 
course of action In order to improve its compliance; 


serving enforcement notices where there has been a breach, 
requiring organisations to take (or refrain from taking) specified 
steps In order to ensure they comply with the law; 


conducting consensual assessments to check organisations are 
complying; and 

Issuing monetary penalty notices, requiring organisations to pay 
up to £500,000 for serious breaches. 


The Commissioner may also prosecute those who commie criminal 
offences under the DPA. 


Functions of Nacro's Resettlement Advice Service 


11. 


12, 


13. 


The relevant functlons of the Resettlement Advice Service for the 
purpose of this MoU with the Commissioner are set out in the points 
below: 


The Resettlement Advice Service endeavours to support Individuals 
who have been forced by an organisation to carry out an enforced 
subject access request (typically in relation to criminal record data), 
We will alert the Commissioner to all instances of enforced subject 
access that come to our attention. 


The Resettlement Advice Service provides support to individuals 
that who have been subject to unlawful criminal record checks 
carried out through the Disclosure and Barring Service (DBS). We 
will report all instances of unlawful checks to the Commissioner; 
and also report to the Commissioner, organtsations that have 
policies in place requiring applicants to give forced consent to 
provide thelr personal sensitive data (typically in refation to criminal 
record data) which is also unlawful through other leglslation 
Including: the Rehabilitation of Offenders Act 1974, the 
Rehabilitation of Offenders Act 1974 (Exceptions)Order 1975 (as 


14, 


15. 


16. 


amended in 2013), Part V of the Police Act 1997 and the Protection 
of Freedoms Act 2012, 


The Resettlement Advice Service seeks to challenge organlsations 
who unlawfully carry out enforced subject access requests, as set 
out in 13, above. 


Where the Resettlement Advice Service Is aware of organisations 
that have application forms or policies In place which do not comply 
with DPA or other relevant legislation(as set out In 14, above), we 
seek to challenge the organisation and also report any suspected 
breach of DPA directly to the Commisstoner. 


The Resettlement Advice Service further seeks to challenge 
organisatlons that require applicants to disclose flxed penalty 
notices (FPN) penalty notices for disorder (PND), arrests, 
allegatlons, not guilty verdicts, disciplinary matters and other 
personal and sensitive data, which we suspect to be breaches of 
DPA; and are also not legally required to be disclose as part of a 
criminal declaratlon for employment or other purposes. The 
Resettiement Advice Service will alert the Commissioner of all 
instances of this issue that are brought to our attention. 


Cooperation between the Commissioner and the Resettlement 
Advice Service 


17. 


18. 


19. 


Subject to any legal restrictions on the disclosure of Informatlon 
(whether imposed by statute or otherwise) and at their discretion, 
the Resettlement Advice Service agree that they will alert the 
Commissioner to any potential breaches of the legislation he 


regulates discovered whilst undertaking it’s dutles, and provide 
relevant Supporting information and Intelligence. 


Subject to any legal restrictions on the disclosure of information 
(whether imposed by statute or otherwise) and his discretion, the 
Commissloner agrees that he will alert the Resettlement Advice 
Service to any potential breaches of the legislation It regulates, or 
information relevant to the aims set out at 11 above, discovered 
whilst undertaking their duties, and provide relevant supporting 
information. 


Subject to any legal restrictions on the disclosure of Information 
(whether Imposed by statute or otherwise) and at thelr discretion, 
both parties will: 


a) Communicate regularly to discuss matters of mutual interest 
(this may Involve participating In multi-agency groups to 
address common issues and threats); and 


b) Consult one another on any issues which might have 
significant implications for the other organisation. 


Sharing information 


20. 


21, 


22, 


23. 


24, 


25. 


Subject to any disclosure restrictions applicable to the Resettlement 
Advice Service, they may disclose confidential information to the 
Commissioner to facilitate the carrying out any required function of 
the Resettlement Advice Service or a statutory function of the 
Commissioner, as set out In 13 and 15 above. 


Where the Resettlement Advice Service wishes to disclose to the 
Commissloner information necessary for the discharge by the 
Commissioner of his functions under the DPA (or under FOIA), 
section 58 DPA provides that no enactment or rule of law prohibiting 
or restricting the disclosure of information shall preclude the 
Resettlement Advice Service from furnishing such information to the 
Commissioner, 


In respect of information obtained by or furnished to the 
Commissioner for the purposes of his functions under the 
Information Acts, It is an offence under section 59 DPA for any 
current of former member of the Commissioner's staff or his agent 


to disclose such Information without lawful authorlty. 


Section 59(2)(e) DPA provides that a disclosure by the 
Commissioner of Information obtained by or furnished to him is 
made with lawful authority where, having regard to the rights and 
freedoms or legitimate Interests of any person, the disclosure Is 
necessary in the public Interest. 


In addition, sectlon 59(2)(d) DPA provides that a disclosure of 
information by the Commissioner Is made with lawful authority 
where the disclosure is made for the purposes of any proceedings, 
whether crimina! or clvil. 


The Commissioner may, at his discretion and In accordance with 
sub-sectlons 59(2)(d) and/or (e) DPA, disclose confidential 
information to Resettiement Advice Service, where this Is necessary 
for performing the functions set out at 8 and/or 9 above. 


Points of contact 


Peter Buffoni, Head of Commercial 
and 
Employer Advice Service 


~ — 


Resettlement Advice Service 
1% Floor 

46 Loman Street 

London 

SEI OEH 


Information Commissioner 


+ 


Adam Stevens, Intelligence 
Hub Manager 


Wycliffe House 
Water Lane 
Wilmslow 

SK9 5AF 


(Signature) 


Peter Buffoni, Head of Commercial 
(Name and title) 
20,01.2015 


(Date) 


Information Commissioner 


(Slgnature) 


CHAI Step ok Gian, 


INER MATN si 
(Name and title) Mits lo nR 


LS li [zo 


(Date) 


